Showing archive results for March 2026

Mar 19, 2026
Post comments count0
Post likes count6

Remote MCP Server preview in Microsoft Foundry

Dan Hellem
Dan Hellem

Earlier this week we release the public preview for our Azure DevOps MCP Server. Today we are excited to let you know that the Azure DevOps MCP Server is now available to use in Microsoft Foundry. For those who are new to Foundry, Microsoft Foundry is a unified platform for building and managing AI powered applications and agents at scale. It brin...

Azure & Cloud
Mar 18, 2026
Post comments count2
Post likes count2

Authentication Tokens Are Not a Data Contract

Angel Wong
Angel Wong

Authentication tokens exist to answer one question: is this caller authorized to do this? They are not intended to be a stable data interface, a schema you can depend on, or an input into application logic. If your application decodes tokens and reads claims from them, this is an important heads-up. Token Claims Were Never Guaranteed Although t...

Azure & CloudDevOpsSecurity
Mar 17, 2026
Post comments count15
Post likes count1

Azure DevOps Remote MCP Server (public preview)

Dan Hellem
Dan Hellem

When we released the local Azure DevOps MCP Server, it gave customers a way to connect Azure DevOps data with tools like Visual Studio and Visual Studio Code through GitHub Copilot Chat. The next step was to make this experience easier to get started with and to enable it for services that support only remote MCP servers. The Remote MCP Server is ...

Azure & Cloud
Mar 13, 2026
Post comments count2
Post likes count0

March Patches for Azure DevOps Server

Gloridel Morales
Gloridel Morales

We are releasing patches for our self‑hosted product, Azure DevOps Server. We strongly recommend that all customers stay on the latest, most secure version of Azure DevOps Server. The latest release, Azure DevOps Server, is available from the download page. This patch addresses an issue introduced in the original Azure DevOps Server release that, ...

Azure DevOps ServerPatches
Mar 11, 2026
Post comments count0
Post likes count0

Temporary rollback: build identities can access Advanced Security: read alerts again

Laura Jiang
Laura Jiang

If you use build service identities like to call Advanced Security APIs, the Advanced Security permission changes in Sprint 269 broke that. We restricted API access for build identities as a security improvement but failed to provide an early notice for customers that relied upon this for various automations. We're rolling it back temporarily. Th...

DevOpsCI/CDSecurity